EUVD-2026-108264

PhpSpreadsheet: SSRF whitelist bypass via unre-validated HTTP redirect in Drawing::setPath external image loading...

CVE-2026-92372 Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Execution

An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows a remote attacker to execute arbitrary code by supplying crafted screen-image data during a remote-control session. The vulnerability can also be exploited ...

CVE-2026-92372

The TeamViewer Full Client for Linux and macOS (versions prior to 15.83) contains an out-of-bounds write vulnerability in its screen-image decoder . The root cause is missing destination bounds checking, which allows a remote attacker to execute arbitrary code by supplying crafted screen-image da...

EUVD-2026-111073

An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows a remote attacker to execute arbitrary code by supplying crafted screen-image data during a remote-control session. The vulnerability can also be exploited ...

fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content

Summary fpdf2 implicitly dereferences image resource references supplied to rendering APIs. If an application passes untrusted HTML, SVG, template data, or image paths into those APIs, fpdf2 may issue outbound HTTPS requests or attempt to open local filesystem paths. This behavior is relevant in...

EUVD-2026-108261

fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content...

GHSA-RW7V-4HRQ-X6R9 fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content

Summary fpdf2 implicitly dereferences image resource references supplied to rendering APIs. If an application passes untrusted HTML, SVG, template data, or image paths into those APIs, fpdf2 may issue outbound HTTPS requests or attempt to open local filesystem paths. This behavior is relevant in...

Maian Pal 2.1 - Unrestricted File Upload in the Administration Product Image Han — Detect

Fingerprint / reachability check for Maian Pal 2.1 - Unrestricted File Upload in the Administration Product Image Handler CWE-434 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Maian Pal 2.1 - Unrestricted File Upload in the Administration Product Image Handler CWE-434""" from...

Maian Pal product image upload PHP webshell RCE

Admin ajax-ops=add stores fmifile as content/products//.php with extension preserved. """Maian Pal 2.1 admin product image upload PHP webshell RCE.""" from future import annotations import re import uuid from urllib.parse import quote, urlencode from kittysploit import from...

godot-security-pocs

Godot security PoCs Reproduction material for security vulnerabilities in Godot Engine, published at each bug's disclosure. One directory per disclosure, named by disclosure date and topic. Index Disclosure| Directory| Bugs ---|---|--- 2026-09-21 — untrusted-file parsers|...

CVE-2026-115915

A flaw was found in vLLM. The application processes user-supplied image data without restricting accepted file formats or verifying that the content matches the declared media type. A remote attacker can exploit this vulnerability by submitting a specially crafted image, such as an Encapsulated...

PT-2026-126416

SDL image through 3.4.8 and through 2.8.12 contains a stack out-of-bounds read vulnerability in IMG LoadLBM IO in src/IMG lbm.c that skips bitplane count validation when HAM mode is set. Attackers can supply a crafted ILBM file with more than 8 HAM bitplanes to read past the colormap stack array,...

VulnCheck KEV: CVE-2026-102785

Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52 - YOOtheme Pro’s publicly accessible image transformation handler incompletely binds normalized image operations and the output destination to its request signature. An unauthenticated remote...

CVE-2026-117511: Improper Neutralization of Special Elements used in an OS Command

A vulnerability has been found in desmondmorris node-tesseract up to 0.2.7. Affected by this issue is the function process of the file lib/tesseract.js of the component Command Builder. Such manipulation of the argument image leads to os command injection. The attack can be executed remotely. The...

PT-2026-126621

Name of the Vulnerable Software and Affected Versions TeamViewer Full Client for Linux and macOS versions prior to 15.83 Description An out-of-bounds write issue exists in the screen-image decoder. This occurs due to missing destination bounds checking in the decoder, which allows crafted...

Desmond Morris Tesseract for node.js command injection vulnerability

Desmond Morris Tesseract for node.js versions 0.2.7 and earlier contain a command injection vulnerability. This vulnerability stems from improper handling of the ‘image’ parameter in the process function within the lib/tesseract.js file in the Command Builder component, potentially allowing OS...

CVE-2026-92372: Write-what-where Condition

An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows a remote attacker to execute arbitrary code by supplying crafted screen-image data during a remote-control session. The vulnerability can also be exploited ...

SourceCodester Online Food Ordering System permission and access control issue vulnerability

The SourceCodester Online Food Ordering System version 1.0 contains a security vulnerability stemming from improper handling of the “image” parameter in the admin/addfood.php file. This flaw may allow unrestricted file uploads, enabling attackers to remotely upload malicious files...

TeamViewer Full Client buffer error vulnerability

TeamViewer Full Client for Linux and macOS versions prior to 15.83 contain a buffer error vulnerability. This vulnerability stems from a lack of target boundary checks in the screen image decoder; when processing specially crafted screen image data, it leads to out-of-bounds writes in the image...

CVE-2026-116603 SourceCodester Online Food Ordering System add_food.php unrestricted upload

A flaw has been found in SourceCodester Online Food Ordering System 1.0. Impacted is an unknown function of the file admin/addfood.php. Executing a manipulation of the argument image can lead to unrestricted upload. The attack may be performed from remote. The exploit has been published and may b...